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CLAIMS 

WE CLAIM : 

1 . A method, comprising: 

determining a private key for a first network based on at least one security value 
5 associated with a second network; and 

establishing a plurality of sessions between a mobile terminal and the first network 
based on the private key. 

2. The method of claim 1, wherein the first network is a cellular network and the 
10 second network is a wireless local area network, and wherein determining the private key 

comprises determining the private key based on a shared secret data key associated with the 
cellular network. 

3. The method of claim 2, wherein determining the private key based on the 
15 shared secret data key comprises applying a root key, an electronic serial number associated 

with the mobile terminal, and a network-supplied random value to a Cellular Authentication 
and Voice Encryption (CAVE) algorithm to generate the private key. 

4. The method of claim 2, wherein determining the private key further comprises 
20 populating the private key with a cryptographic transform of the shared secret data key. 

5. The method of claim 1, wherein the first network is a cellular network having 
an associated authentication center and the second network is a wireless local area network, 
and wherein determining the private key comprises determining the private key based on one 
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or more random challenges generated by the authentication center associated with the cellular 
network. 

6. The method of claim 5, wherein the cellular network is a code division 
multiple access (CDMA) network, wherein determining the private key comprises 
determining one or more responses associated with the one or more challenges based on the 
shared secret data key associated with the CDMA network and combining the determined one 
or more responses to form the private key. 

7. The method of claim 1, further comprising determining at least one session 
key based on the determined private key. 

8. The method of claim 1, wherein establishing the plurality of sessions 
comprises authenticating the mobile terminal to the first network for each of the plurality of 
sessions. 

9. The method of claim 7, wherein authenticating the mobile terminal to the first 
network comprises: 

receiving a challenge from the first network; and 

transmitting a response associated with the received challenge, wherein the response 
is calculated based on the private key. 
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10. The method of claim 1, wherein establishing the plurality of sessions 
comprises determining a session key for each of the plxirality of sessions based on the private 
key. 

11. A method, comprising: 

receiving at least one security value associated with a cellular network; 

determining a private key for a wireless local area network based on the security value 

associated with the cellular network; and 
allowing establishment of a plurality of sessions between a mobile terminal and the 

wireless local area network based on the private key. 

12. The method of claim 11, wherein the cellular network is a code division 
multiple access (CDMA) network, and wherein receiving the at least one security value 
comprises receiving a shared secret data key associated with the CDMA network and wherein 
determining the private key comprises using the shared secret data key as the private key. 

13. The method of claim 12, wherein determining the private key comprises 
populating the private key with a cryptographic transform of the shared secret data key. 

14. The method of claim 12, wherein receiving the shared secret data key 
comprises receiving the shared secret data key over a Signaling System 7 (SS7) protocol. 

15. The method of claim 12, wherein the cellular network is a code division 
multiple access (CDMA) network having an associated authentication center, and wherein 
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receiving at least one security value comprises receiving one or more responses associated 
with one or more challenges that are generated by the authentication center associated with 
the CDMA network. 

16. The method of claim 15, wherein receiving the one or more responses 
comprises receiving the one or more responses over a Signaling System 7 (SS7) protocol. 

17. The method of claim 15, further comprises receiving the one or more 
challenges from the authentication center and providing the one or more challenges to the 
mobile terminal. 

18. The method of claim 17, wherein providing the one or more challenges to the 
mobile terminal comprises providing the one or more challenges over an Extensible 
Authentication Protocol. 

19. The method of claim 17, wherein determining the private key comprises 
combining the one or more responses. 

20. A method, comprising: 

receiving, at a server, at least one security value associated with a cellular network; 
determining, using the server, a private key based on the at least one security value; 
determining, at a mobile terminal, a private key based on the at least one security 
value associated with the cellular network; and 
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allowing establishment of a plurality of sessions between the mobile temiinal and the 
wireless local area network based on the private key determined by the mobile 
terminal. 

5 21. The method of claim 20, wherein receiving the at least one security value 

comprises receiving a shared secret data key associated with the cellular network and wherein 
determining, at the server, comprises determining the private key based on the shared secret 
data key. 

10 22. The method of claim 20, wherein receiving the at least one security value 

comprises receiving one or more random challenges generated by an authentication center 

associated with the cellular network and wherein determining, at the server, comprises 
determining the private key based on one or more signed responses associated with the 
respective one or more challenges. 

15 

23. The method of claim 20, further comprises transmitting messages between the 
server and the mobile terminal using an Extensible Authentication Protocol. 

24. The method of claim 20, wherein determining, at a mobile terminal, the 
20 private key based on the at least one security value associated with the cellular network 

comprises determining the at least one security value associated with at least one of a CDMA 
network, TDMA network, GSM network, OFDMA network, and AMPS network. 



